feat: init repo for gitlab iac

.gitignore

@@ -0,0 +1,3 @@
+git-data/
+gitlab.env
+runner-config/config.toml

docker-compose.yaml

@@ -0,0 +1,35 @@
+services:
+  gitlab:
+    image: 'gitlab/gitlab-ce:latest'
+    restart: always
+    hostname: 'gitlab.nstest.local'
+    container_name: gitlab-ce
+    env_file:
+      - gitlab.env
+    ports:
+      - '8586:8081'
+      - '8545:443'
+      - '8090:8090'
+      - '22:22'
+    volumes:
+      - '$GITLAB_HOME/config:/etc/gitlab'
+      - '$GITLAB_HOME/logs:/var/log/gitlab'
+      - '$GITLAB_HOME/data:/var/opt/gitlab'
+    networks:
+      - gitlab
+
+  gitlab-runner:
+    image: gitlab/gitlab-runner:latest
+    container_name: gitlab-runner
+    restart: always
+    user: root
+    depends_on:
+      - gitlab
+    volumes:
+      - ./runner-config:/etc/gitlab-runner
+      - /var/run/docker.sock:/var/run/docker.sock
+    networks:
+      - gitlab
+
+networks:
+  gitlab:

gitlab.env.example

@@ -0,0 +1,32 @@
+GITLAB_OMNIBUS_CONFIG="
+	external_url = 'https://gitlab.nstest.local'	
+	nginx['listen_port'] = 8081
+	nginx['listen_https'] = false
+	gitlab_rails['omniauth_enabled'] = true
+	gitlab_rails['omniauth_allow_single_sign_on'] = true
+	gitlab_rails['omniauth_auto_sing_in_with_provider'] = 'openid_connect'
+	gitlab_rails['omniauth_block_auto_created_users'] = false
+	gitlab_rails['omniauth_auto_link_ldap_user'] = false
+	gitlab_rails['omniauth_auto_link_user'] = ['openid_connect']
+	gitlab_rails['gitlab_ssh_host'] = 'ssh.gitlab.nstest.local'
+	gitlab_rails['omniauth_providers'] = [{
+		name: 'openid_connect',
+		label: 'Новый Старт ID',
+		args: {
+			name: 'openid_connect',
+			scope: %w[openid profile email],
+			response_type: 'code',
+			issuer: 'https://auth.nstart.space/realms/nstart',
+			discovery: true,
+			client_auth_method: 'basic',
+			uid_field: 'preferred_username',
+			pkce: false,
+			client_options: {
+				identifier: 'gitlab',
+				secret: '',
+				redirect_uri: 'https://gitlab.nstest.local/users/auth/openid_connect/callback',
+			}
+		}
+	}]
+
+"

runner-config/config.toml.example

@@ -0,0 +1,31 @@
+concurrent = 5
+check_interval = 0
+shutdown_timeout = 0
+
+[session_server]
+  session_timeout = 1800
+
+[[runners]]
+  name = "docker-nstest"
+  url = "http://gitlab-ce:8081"
+  id = 1
+  token = ""
+  token_obtained_at = 2025-11-01T14:59:32Z
+  token_expires_at = 0001-01-01T00:00:00Z
+  executor = "docker"
+  [runners.cache]
+    MaxUploadedArchiveSize = 0
+    [runners.cache.s3]
+    [runners.cache.gcs]
+    [runners.cache.azure]
+  [runners.docker]
+    tls_verify = false
+    image = "debian:stable"
+    privileged = true
+    disable_entrypoint_overwrite = false
+    oom_kill_disable = false
+    disable_cache = false
+    volumes = ["/home/ivan/docker/git/git-data/gitlab-runner/config/repo.nstart.local.crt:/etc/docker/certs.d/repo.nstart.local/ca.crt:ro", "/cache"]
+    shm_size = 0
+    network_mtu = 0
+    extra_hosts = ["gitlab.nstest.local:192.168.103.13"]

runner-config/repo.nstart.local.crt

@@ -0,0 +1,22 @@
+-----BEGIN CERTIFICATE-----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+-----END CERTIFICATE-----
+